Enabling Palo Alto Networks Super User Access via SAML
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
When integrating Palo Alto Networks with Okta via Security Assertion Markup Language (SAML) using the default configuration, the highest administrator privilege a user can have upon sign-in is "Administrator." However, this "Administrator" role in Okta does not correspond to the role with the highest privileges within Palo Alto Networks.
Applies To
- Palo Alto
- Admin Privileges
Cause
While users may sign in with the "Admin" role in Palo Alto Networks, this role does not provide the highest level of privileges. The "Super User" role in Palo Alto Networks grants the most extensive access.
Solution
The Admin Role attribute for Okta users assigned to the Palo Alto application must be set to superuser to grant Super User privileges when signing into Palo Alto Networks via SAML.
